@gertvdijk eRR... excuse my ignorance but already having THEIR app - doesn't that already give the game away? Like unless that app's permissions almost decline to use any permissions then "oef course" it can do whatever it wants thereafter? (can check permissions and see how bad they are, even by going to re-install app will show you).
A 2nd obvious answer is "why would the bank give a monkeys if there wasn't something horrendous like you suggested ? (without being too conspiratorial but IT'S THE BANK!). They are not going to put it front and centre for you!
Said with love/humour...